CVE-2026-7608

A vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01. The affected element is the function tools_diagnostic. The manipulation results in os command injection. The exploit is now public and may be used. The vendor explains: "That firmware version will only work on our hardware version v1.xR. We have already EOL that product 8 years ago and are no longer selling". This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-77
• CWE-78

• https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Trendnet/TEW-821DAP_CI1.mdExploit, Third Party Advisory
• https://vuldb.com/submit/806215Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/360565Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/360565/ctiPermissions Required, VDB Entry

Published

May 2, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-7607A security vulnerability has been detected in TRENDnet TEW-8…8.8
• CVE-2026-76070Netis NC63 firmware through V3.0.0.3327 contains a stack-bas…9.8
• CVE-2026-76071Netis NC63 firmware through V3.0.0.3327 contains a stack-bas…9.8
• CVE-2026-76072The Continue CLI applies an incomplete denylist as its only …7.4
• CVE-2026-76073Label Studio does not scope the annotation detail endpoint t…8.8
• CVE-2026-76074The AutomatorWP – Automator plugin for no-code automations, …4.3
• CVE-2026-76081ZITADEL is an open source identity management platform. Prio…5.5
• CVE-2026-76086Formie is a Craft CMS plugin for creating forms. Prior to 2.…8.5
• CVE-2026-76087Formie is a Craft CMS plugin for creating forms. Prior to 2.…8.2
• CVE-2026-76089Formie is a Craft CMS plugin for creating forms. Prior to 2.…7.7
• CVE-2026-7609A flaw has been found in TRENDnet TEW-821DAP up to 1.12B01. …8.8
• CVE-2026-76098Mistune is a Python Markdown parser with renderers and plugi…7.5